Ping Sweeps and Port Scans

* Identify risks, threats, and vulnerabilities in an IP network infrastructure using ZenMap GUI (Nmap) to perform an IP host, port, and services scan

Despite the presence of network security devices such as firewalls and other security appliances, today's corporate networks are still vulnerable to both internal and external attacks by hackers intent on creating havoc. By proactively

We should perform Attack and Penetration tests to identify vulnerabilities in our network which can be accessed by hackers. Attackers sniffing on the network look for weak points in the network, thus knowing the weak points using internal and external attack and penetration tests will make our network more secure.

The port scan basically scans the target computer services that use TCP and UDP ports and finds the available open ports. This is harmless as it only scans but it can give away potential information to the attacker and then once the attacker gathers the info, it helps them to plan and launch various attacks. There are different types of port scanning tools available for free such as nmap and SAINT but nmap is the most used tools to scan a network as it hardly needs administrative rights to run the

The second step of the ethical hacking process typically consists of two parts: port scanning and

In order to diminish both security and privacy risks to organizations, measures need to be taken to combat risks throughout the various stages of the threat’s life cycle. Specific processes must be implemented to identify threats, procedures to follow when the attack occurs, and finally methods to recover from the attack (Houlding, 2011).

“Security programs are aimed at creating an appreciation and understanding of the Security Department’s objectives as they relate to the specific industry they serve” (Sennewald, 2013). Businesses come in all different sizes, some big some small. Businesses need a plan to ensure assets, personnel, and facilities are protected and this plan must be actively in place. Security programs provide businesses with the framework needed to keep a business or company at the security level needed to operate. This can be done in numerous ways. Assessing the risks involved, lessening the gravity of those risks, and keeping the security program and the security practices updated are just to name a few. In this core assessment paper, I will identify an actual organizational security program, conduct

Threat modeling is the process of optimizing an organizations’ security of their network by finding vulnerabilities in that system, and then deploying countermeasures to protect against those threats should they happen in the future. If a company wants to know what vulnerabilities they may have then threat modeling is an excellent way of determining these threats. An individual threat is when an event occurs that has a negative impact on an organization’s daily operations. (Rouse, 2006). These negative impacts can manifest themselves in many ways from damaging the reputation of that organization to interrupting the functions of that organization. These threats can be in the form of destruction or stealing sensitive data, cracking of weak passwords, malware, phishing, or other scams and frauds. The goal of this paper is to address how the organizations code of ethics and security policies apply, what specific security policies can be deployed, and to identify the impact of asset security standards and governance. I chose Northrop Grumman as the focus of my paper

Since E-Commerce and technology evolves every day, developing a team or process to stay on top of potential business risks associated to security.

On January 12th, 2007 at 4:31am, Bob Turley, CIO of the iPremier Company, received a panicked phone call from his IT operations staff. Their external facing website was “locked up” and could not be accessed by anyone, including their customers. iPremier is a web-based business that generates revenue through solely processing online orders. While the web server was down, the company could not accept any new orders or allow their customers to view their products. An inadequately third-party managed and configured router/firewall allowed hackers to execute a DOS (Denial of Service) attack on iPremier. I recommend purchasing a new firewall solution that will be managed and configured by the Company’s IT staff internally. This

Technology is fast-paced and new forms of security threats are identified every day, forcing organizations to

Recommendation to plan and implement a security policy in order to protect our financial, intellectual and customer data from external threats. The rising number of cyber security attacks is a problem that is growing more advanced everyday. In 2014 cyber attacks against large corporation increase 40 percent from the previous year (Carey, 2015). Due to these threats small businesses through large multi-national corporations are under immense scrutiny as to how they are dealing with protecting their intellectual property and sensitive customer data from being lost, stolen or modified. Computer hackers are constantly finding more creative ways to exploit security holes in networks, computer systems and web e-commerce sites.

When it comes to fundamental challenges that organizations face in general in regard to protecting organizational assets and information it becomes overlooked. Eliminating threats is impossible, so protecting against them without disrupting business innovation and growth is a top management issue. Cybersecurity the protection of valuable intellectual property and business information in digital form against theft and misuse, one of the most serious economic and national security challenges we face as a nation (Michael Riley). Being prepared to protect assets and information is a much difficult task for businesses.

The frequency and severity of cyber-attacks on maritime targets increases every year. Often the damage is not discovered until years later. The cyber-attack on the port of Antwerp began in 2011 and continued until it was discovered in 2013. The Danish Maritime Authority was attacked in 2012 by a virus contained in a PDF (portable document format by Adobe). The virus spread throughout the Maritime Authority’s network and into Danish government institutions before it was discovered in 2014. Reasons for the ever-increasing security exposure include the growing use and interdependence of computer systems, the relative ease and extreme value of executing attacks, and the exceptional difficulty in identifying the culprits and bringing them to justice. Regrettably, some port authorities contribute to their vulnerability by addressing cyber-security as a technology threat best left to IT professionals. On the contrary, successful and serious cyber-attacks are inevitable and the planned response must be subject to the same governance and scrutiny that any existential threat would receive. One reason that port authorities hesitate to engage cyber-threats at the Board level is a lack of appreciation for just how impossible cyber-security is. A more complete understanding of the factors that complicate cyber-security can assist Directors in stepping up to set priorities and oversee contingency and remediation plans.

Random Scanning – a random IP address is selected from a pool of addresses and a malicious code checks for its vulnerability. If found vulnerable, the malicious code is installed and it further probes to find another vulnerable machine. The advantage of this technique is that it spreads the malicious code really quick and eventually the attacker has a pool of zombies in no